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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 
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DETAILED ACTION 

1 . Claims 1-37 have been considered. 

Claim Objections 

2. Claims 1 , 5, 7, 8, 20, and 24 are objected to because of the following informalities: The phrase 
"digital, electronic device" should be "digital electronic device". Appropriate correction is requested. 

Specification 

3. Applicant is reminded of the proper language and format for an abstract of the disclosure. 

4. The abstract should be in narrative form and generally limited to a single paragraph on a separate 
sheet within the range of 50 to 150 words. It is important that the abstract not exceed 150 words in length 
since the space provided for the abstract on the computer tape used by the printer is limited. The form 
and legal phraseology often used in patent claims, such as "means" and "said," should be avoided. The 
abstract should describe the disclosure sufficiently to assist readers in deciding whether there is a need 
for consulting the full patent text for details. 

5. The language should be clear and concise and should not repeat information given in the title. It 
should avoid using phrases which can be implied, such as, "The disclosure concerns," "The disclosure 
defined by this invention," "The disclosure describes," etc. 

Claim Rejections - 35 USC § 102 

6. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for 
the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United 
States only if the international application designated the United States and was published under 
Article 21(2) of such treaty in the English language. 



Application/Control Number: 09/910,256 
Art Unit: 3621 



Page 3 



7. Claims 1-36 rejected under 35 U.S.C. 102(e) as being anticipated by U.S. Patent Application 
Publication No. US 2003/0154405 A1 to John Harrison. 

8. As per claim 1 , Harrison discloses a method for carrying out over a network at least one verified, 
remote electronic transaction between at least one user and at least one merchant by providing to a 
merchant's server verified user information, which is necessary to complete the verified transaction, the 
method comprising: 

• interfacing a machine-readable data structure of the user with a digital, electronic device, wherein 
the digital, electronic device is connected to the network (See Harrison abstract, paragraphs 
[0021], [0022], [0090], and [0130], where a machine-readable data structure corresponds to smart 
card and smart card reader corresponds to digital , electronic device); 

• providing an access code via the digital, electronic device to unlock the machine-readable data 
structure and to thereby access a database of verifiable user information contained therein (See 
Harrison abstract, paragraphs [0023], [0091], [0094], [0132], and [0132], where access code 
corresponds to a PIN or PASSWORD); and 

• providing the verifiable user information to the merchant over a communication link of the network 
to complete the transaction (See Harrison paragraphs [0015]-[0022] and [0132]). 

9. As per claim 2, Harrison discloses the method of claim 1 , further; Harrison discloses, 
verifiable user information is compared with similar user information residing on a verifying server 

on the network (See Harrison paragraphs [0015]-[0022]). 

10. As per claim 3. The method of claim 1 , further; Harrison discloses, 

the machine-readable data structure is selected from the group consisting of an integrated circuit 
card, a magnetic stripe card, and a bar coded card (See Harrison paragraphs [0090] and [0130]). 



11. 



As per claim 4, Harrison discloses the method of claim 1 , further; Harrison discloses, 
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at least one merchant is a verifiable merchant (See Harrison paragraph [0132] where the vendor 
is corresponding to merchant). 

12. As per claim 5, Harrison discloses the method of claim 1 , further; Harrison discloses, 

the machine-readable data structure is unlocked by providing an access code through the digital, 
electronic device that matches a previously registered personal security code (See Harrison paragraphs 
[0023] and [0094]). 

13. As per claim 6, Harrison discloses the method of claim 5, further; Harrison discloses, 

the previously registered personal security code is contained in unsecured memory on the machine- 
readable data structure (See Harrison paragraph [0023]). 

14. As per claim 7, Harrison discloses the method of claim 1 , further; Harrison discloses, 

a first communication link between said digital, electronic device and the merchant's server is 
established following the unlocking of the machine-readable data structure (See Harrison paragraph 
[0132], where the vendor 70 corresponds to merchant server and a first communication link corresponds 
to communication link 42 internet). 

1 5. As per claim 8, Harrison discloses the method of claim 1 , further; Harrison discloses, 

the communication link between the digital, electronic device and the merchant's server is established 
through a second communication link from said digital, electronic device to a verifying server and then 
through a third communication link from said verifying server to said merchant's server (See Harrison 
paragraph [0132], where in figure 2, the vendor 70 corresponds to merchant server and a second 
communication link corresponds to communication link 41 a and a third communication link corresponds 
to 41b). 

16. As per claim 9, Harrison discloses the method of claim 1 , further; Harrison discloses, 
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verified user information is transmitted to at least one merchant's server to populate at least one 
merchant's check-out form (See Harrison paragraphs [0112] and [0135]). 

17. As per claim 10, Harrison discloses the method of claim 9, further; Harrison discloses, 
verified user information is transmitted to at least one merchant's server to populate at least one 

merchant's check-out form, following verification of the user's information at a verifying server (See 
Harrison paragraphs [0112] and [0135]). 

18. As per claim 1 1 , Harrison discloses the method of claim 9, further; Harrison discloses, 

said check-out form is populated manually by the user (See Harrison paragraphs [0087] and 

[0132]). 

19. As per claim 12, Harrison discloses the method of claim 9, further; Harrison discloses, 

said check-out form is populated automatically (See Harrison paragraphs [01 12] and [0135]). 

20. As per claim 13, Harrison discloses the method of claim 1 , further; Harrison discloses, 
verified user information is transmitted to at least one merchant's server by automatically 

populating a merchant's order database and transaction systems (See Harrison paragraphs [01 12], 
[0132], and [0135]). 

21 . As per claim 14, Harrison discloses the method of claim 13, further; Harrison discloses, 
verified user information is transmitted to at least one merchant's server by automatically 

populating a merchant's order database and transaction systems following verification of the user's 
information at a verifying server (See Harrison paragraphs [01 12], [0132], and [0135]). 

22. As per claim 15, Harrison discloses the method of claim 1, further; Harrison discloses, 
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the merchant's server contains server-side software to accept direct transmission of verified user 
information from the machine-readable data structure, without using forms (See Harrison paragraph 
[0132]). 

23. As per claim 16, Harrison discloses the method of claim 1 , further; Harrison discloses, 

the network is selected from the group consisting of local area networks, wide area networks, the Internet, 
and Wireless and Mobile networks (See Harrison paragraph [0013]). 

24. As per claim 17, Harrison discloses the method of claim 1 , further; Harrison discloses, 
the additional steps of: 

providing authorization from the user to complete said verified transaction; 
completing said verified transaction; 

providing at least one message to the merchant, indicating that said verified transaction comprises a 
valid, card present equivalent transaction; and 

providing at least one message, comprising at least one transaction number, to the user's digital, 
electronic device to confirm the sale (See Harrison paragraphs [0014]-[0020], [0045], [0052] and [0202] . 

25. As per claim 18, Harrison discloses a method for providing verified information about at least one 
user over a network to at least one merchant during at least one electronic transaction, the method 
comprising the steps: 

• providing at least one access code provided by the at least one user and unique user information 
to at least one verifying server, wherein said verifying server is connected to the network; 

• verifying said access code and unique user information; and 

• providing verified user information to the at least one merchant (See Harrison paragraphs [0009], 
[0014]-[0019], and [0024], where access code and unique user information correspond to a 
password and ID and verifying server corresponds to secure server). 
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26. As per claim 19, Harrison discloses the method of claim 18, further; Harrison discloses, 

said access code is verified by comparing said access code with a previously registered security 
code stored on a machine-readable data structure (See Harris paragraph [0094]). 

27. As per claim 20, Harrison discloses the method of claim 19, further; Harrison discloses, 

said access code is verified by presenting said access code through a digital, electronic device to 
the machine-readable data structure (See Harris paragraph [0130]). 

28. As per claim 21 , Harrison discloses the method of claim 18, further; Harrison discloses, 

said unique user information is released for verification against similar data stored in at least one 
database of the at least one verifying server (See Harris paragraphs [003], [0130], and [0132]). 

29. As per claim 22, Harrison discloses the method of claim 21 , further; Harrison discloses, 

said unique user information is released for verification against similar data stored in at least one 
database of the at least one verified server upon verification of the access code (See Harris paragraphs 
[003], [0130], and [0132]). 

30. As per claim 23, Harrison discloses the method of claim 1 8, further; Harrison discloses, 

the network is selected from the group consisting of local area networks, wide area networks, the 
Internet, and Wireless and Mobile networks (See Harrison paragraph [0013]). 

31 . As per claim 24, Harrison discloses a system enabling a user to complete one or more verified, 
remote electronic transactions over a network with at least one merchant, said merchant having a server, 
wherein said verified transactions are completed by providing the merchant's server with verified user 
information, the system comprising: 

• a network (See Harrison paragraph [0013]); 
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• at least one remote verifying server, wherein said remote verifying server is connected to the 
network and is capable of receiving and verifying verified user information (See Harrison 
paragraphs [0014]-0019]); 

• at least one remote server maintained by a merchant, wherein the merchant's at least one remote 
server is connected to the network and is capable of accessing said remote verifying server to 
receive verified user information therefrom (See Harrison paragraphs [0014]-[0019]); 

• at least one remote digital, electronic device (corresponding to kiosk or a user terminal), that is 
maintained by the user or by a third party wherein said digital, electronic device is connected to 
the network (corresponding to Internet) and is capable of accessing said verifying server to 
transmit verified user information and said remote server maintained by a merchant to initiate and 
complete said verified, remote electronic transactions (See Harrison paragraph [0130]); and 

• a machine-readable-data structure, having at least one secure memory cache, which interfaces 
with said digital, electronic device (See Harrison paragraphs [0023] and [0094], where a machine- 
readable-data structure corresponds to smart card). 

32. As per claim 25, Harrison discloses the system of claim 24, further; Harrison discloses, 

the system further comprises a registered personal security code that is stored in said secure 
memory cache of said machine-readable data structure (See Harrison paragraphs [0023] and [0094]). 

33. As per claim 26, Harrison discloses the system of claim 24, further; Harrison discloses, 
the machine-readable data structure comprises at least one of an integrated circuit card, a 

magnetic stripe card, or a bar coded card (See Harrison paragraphs [0023] and [0094]). 

34. As per claim 27, Harrison discloses the system of claim 26, further; Harrison discloses, 
the integrated circuit card, having a surface, further comprises: 
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at least one internal microprocessor, at least one internal semiconductor memory, having a 
secured first portion for storing verifiable user information and an unsecured second portion, wherein said 
at least one internal semiconductor memory is controlled by said at least one internal microprocessor; 
and at least one mass-storage memory, wherein said at least one mass storage memory is accessible 
from the surface of the card (See Harrison paragraphs [0023] and [0094]). 

35. As per claim 28, Harrison discloses the system of claim 24, further; Harrison discloses, 
said machine-readable data structure can be unlocked by a security algorithm (See Harrison 

paragraphs [0022], [0023], and [0094]). 

36. As per claim 29, Harrison discloses the system of claim 28, further; Harrison discloses, 

said machine-readable data structure can be unlocked by inputting an access code (See Harrison 
paragraphs [0022], [0023], and [0094]). 

37. As per claim 30, Harrison discloses the system of claim 29, further; Harrison discloses, 

said machine-readable data structure is unlocked after the access code inputted by the user is 
verified against a previously registered security code that is stored in said secured first portion of said 
internal semiconductor memory (See Harrison paragraphs [0022], [0023], and [0094]). 

38. As per claim 31 , Harrison discloses the system of claim 30, further; Harrison discloses, 
said previously registered security code is resident in one or more memory on the machine- 
readable data structure (See Harrison paragraphs [0022], [0023], and [0094]). 

39. As per claim 32, Harrison discloses the system of claim 29, further; Harrison discloses, 
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said system further comprises software capable of providing verified user information to at least 
one verifying server for verification upon prior successful access code verification (See Harrison 
paragraphs [0022], [0023], and [0094]). 

40. As per claim 33, Harrison discloses the system of claim 24, further; Harrison discloses, 

at least one verifying server provides verified user information to said merchant's server to 
populate a merchant's check-out form contained therein (See Harrison paragraphs [01 12], [0132], and 
[0135]). 

41 . As per claim 34, Harrison discloses the system of claim 33, further; Harrison discloses, 

said at least one verifying server provides verified user information to said merchant's server by 
automatically populating an order database and transaction system (See Harrison paragraphs [0112], 
[0132], and [0135]). 

42. As per claim 35, Harrison discloses the system of claim 33, further; Harrison discloses, 

said merchant's server contains server-side software to accept direct transmission of the user's 
machine-readable data, without using forms (See Harrison paragraph [0132]). 

43. As per claim 36, Harrison discloses the system of claim 35, further; Harrison discloses, 

said direct transmission of the user's machine readable data is stored originally on the user's 
machine-readable data structure (See Harrison paragraph [0132]). 

Claim Rejections - 35 (JSC § 103 

44. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 

rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
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patented and the prior art are such that the subject matter as a whole would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains. Patentability shall not be negatived by the manner in which the invention 



45. Claim 37 is rejected under 35 U.S.C. 103(a) as being unpatentable over U.S. Patent Application 
Publication No. US 2003/01 54405 A1 to John Harrison. 

46. As per claim 37, Harrison discloses the system of claim 33, further; Harrison discloses, 

the user manually populates the merchant's check-out form (See Harrison paragraph [0132]) by 
dragging verified user information from at least one pop-up window and dropping the dragged information 
into an appropriate location of the merchant's check-out form. 

What is not explicitly disclosed by Harrison is the drag and drop functionality of populating a form 
in a graphical user interface. 

However, The examiner takes Official Notice that the process of drag and drop of visual items 
such as text or graphics within a graphical user interface from one window to another window is an old 
and well known practice in the art as an easy way to populate new windows with old items of interest 
without retyping or recreating the content. 

Therefore, it would have been obvious to one having ordinary skill in the art at the time the 
current invention was made to have included the drag and drop functionality to the invention for the 
motivation of saving time and accuracy of populating forms without retyping the text. 

47. Examiner has pointed out particular references contained in the prior arts of record in the body 
of this action for the convenience of the applicant. Although the specified citations are representative of 
the teachings in the art and are applied to the specific limitations within the individual claim, other 
passages and figures may apply as well. It is respectfully requested from the applicant, in preparing the 
response, to consider fully the entire references as potentially teaching all or part of the claimed 
invention, as well as the context of the passage as taught by the prior arts or disclosed by the 
examiner. 



was made. 
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Conclusion 



48. Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to Kambiz Abdi whose telephone number is (703) 305-3364. The examiner can normally be 
reached on 9 AM to 5:00 PM. 

49. If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
James P Trammell can be reached on (703) 305-9768. The fax phone number for the organization where 
this application or proceeding is assigned is 703-872-9306. 

50. Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) 
at 866-217-9197 (toll-free). 

Any response to this action should be mailed to: 



or faxed to: 

(703) 872-9306 [Official communications; including After Final communications labeled "Box AF"] 
(703) 746-7749 [Informal/Draft communications, labeled "PROPOSED" or "DRAFT"] 
Hand delivered responses should be brought to: 



Commissioner of Patents and Trademarks 
Washington, D.C. 20231 



Crystal Park 5, 2451 Crystal Drive 

7th floor receptionist, Arlington, VA, 22202 




